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AMENDMENTS TO THE CLAIMS 

Please cancel, without prejudice or disclaimer, claims 1-11, 15, and 
19-20, and amend independent claim 12 as follows: 



5 Claims 1-11. Canceled. 



1 2. (Currently Amended) A method for implementing security 
management in a storage area network including at least one storage 
resource user, an data storage RAID controller, and a data storage array 
10 coupled to the controller, the method comprising the steps of: 

granting access to data storage areas on disks in the storage array to 
specific storage resource users of the at least one storage resource user; 

storing, in a table of approved entities in non-volatile memory in the 
controller, indicia of data storage areas on disks in the storage array 
15 accessible to any storage resource user that has been granted access to 
data storage areas on disks in the storage array; 

storing, in a table of not-yet-approved entities in volatile memory in 
the controller, indicia of any of the at least one storage resource user that 
have not been granted access to data storage areas on disks in the storage 
20 array; 

requesting access to the areas by sending at least the identifying 
indicia from the storage resource user to the resource provider; and 

examining the table of approved entities for the identifying indicia to 
determine whether any of the data storage areas are available to the 
25 requesting storage resource user; 
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wherein, if the data storage areas are determined to be available to 
the storage resource user requesting access to the data storage areas, then 
allowing the storage resource user to access the data storage areas; 
otherwise, if no the data storage areas are determined to be available to the 
5 requesting storage resource user, then storing the identifying indicia in the 
table of not-yet-approved entities[J; 

uploading a list of available data storage areas from the controller to 
a management station; 

uploading the table of not-vet-approved entities from the controller; 

10 selecting the identifying indicia corresponding to a storage resource 

user, from the table of not-yet-approved entities; 

selecting, from the list of available data storage areas, the data 

storage areas to be made available to the storage resource user; 

sending association information to the controller, the association 

15 information including a list of the data storage areas to be made available to 
the storage resource user and the identifying indicia corresponding to a 
storage resource user; and 

allocating, to the storage resource user, the data storage areas 

included in the association information. 

20 

13. (Original) The method of claim 12, wherein the indicia comprise the 
node World Wide Name and port World Wide Name for the storage resource 
user. 
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1 4. (Original) The method of claim 1 2, including the step of providing 
notification to the storage resource user that a resource is available on the 
storage area network. 

5 15. Canceled. 

1 6. (Original) The method of claim 1 2, wherein the data storage areas 
comprise logical units. 

10 1 7. (Original) The method of claim 1 6, including storing the data storage 
areas to be made available to the storage resource user in a LUN access 
map in the table of approved entities. 

18. (Original) The method of claim 1 7, wherein each command received 
15 from the storage resource user is checked by the controller against the LUN 
access map for authentication. 

Claims 19-20. Canceled. 
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